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(57) A nonvolatile memory (20) with flash erase 
capability comprises a plurality of sectors, each 
of the sectors holding the attribute information 
for identification. A cluster information sector is 
in principle placed in the top of a cluster to 
which it belongs. A data sector is placed in a 
data area which is the region other than the top 
of the cluster. A controller (30) connected to the 
memory creates a cluster information copy sec- 
tor when erasing a cluster, and reconstructs 
cluster management information from the clus- 
ter information copy sector when initializing a 
cluster, thereby forming a cluster information 
sector. 

This improves the endurance against failure 
such as power failure in a solid state file ap- 
paratus using a nonvolatile memory with flash 
erase capability. 
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The present invention relates to a nonvolatile 
memory with flash erase capability such as a flash 
EEPROM (hereinafter referred to as a flash memory) 
and a solid state file apparatus using the same, and 
more particularly to save, recover, and update the 
control information such as erase counts of a cluster. 

A flash memory has been developed as a mem- 
ory used for a solid state file apparatus. Its memory 
element is composed of one transistor as a DRAM so 
that it can be packaged at high density, and it is ex- 
pected to have a bit cost equivalent to, or less than 
that of a DRAM (low cost, large capacity), depending 
on the future market. The memory element is nonvo- 
latile and does not require a battery backup. Erasure 
is generally performed for each chip for each smaller 
block. The outline of such a flash memory is intro- 
duced by Richard D. Pashley et al. in "Flash Memor- 
ies: the best of two worlds," IEEE SPECTRUM, De- 
cember 1989, pp. 30 - 33. As far as performance is 
concerned, the block erase type is superior to the chip 
erase type. 

When the flash memory of block erase type is 
used for a solid state file (SSF), it is convenient to 
memory management if the size of a block is made 
equal to a sector, which is a unit of access in the mag- 
netic disk apparatus. European Patent Application 
392895, for example, discloses a flash EEPROM sys- 
tem of the sector erase type. The system makes it 
possible to simultaneously erase any plural sectors 
by providing a latch for each sector, which is a unit of 
erasure, and setting a latch corresponding to a sector 
to be erased. Also known is a flash memory whose 
unit of erasure is a block having a size equivalent to 
a plurality of sectors (e. g. 4K bytes). Furthermore, it 
is possible to make a cluster including a plurality of 
blocks, each of which is a physical erase unit, a logical 
erase unit. 

However, the flash memory has limitations which 
SRAMs and DRAMs do not have. First, the program- 
ming of memory bits is a one-way process and 
change is allowed only from 0 to 1 or from 1 to 0. 
Therefore, when new data is to be written to a mem- 
ory location which has already been written, writing 
should be performed after a block including that 
memory location is erased to an all 0 or all 1 state. It 
is usually takes from several tens of milliseconds to 
several seconds for erasure and writing. Further- 
more, the flash memory is deteriorated by erasure 
and writing and reaches a use limit, at present, after 
several tens of thousands to several hundreds of 
thousands of erasures and writings. 

To cope with such problems, it is necessary to 
save the erase counts for each block so as not to ex- 
ceed the upper limit of the erase counts. In addition, 
as disclosed in Patent Appln. No. 3-197318, it is nec- 
essary to provide such measures that bad sectors in 
a cluster, the locations of which have been previously 
stored, are skipped when physical sectors are dynam- 



ically assigned to logical sectors. Although there aris- 
es such a situation where control information describ- 
ing the state of flash memory should be held in the 
flash memory itself, because of the characteristics of 

5 the flash memory, such control information is erased 
at the same time data is erased. Usually, such control 
information is copied in a RAM area of the controller 
for SSF prior to its erasure, and written back into the 
flash memory after the blocks are erased. However, 

10 when such an approach is employed, if a system fail- 
ure such as power failure should happen during era- 
sure of clusters, the control information on the RAM 
is lost and the controller cannot recover it. 

In addition, block failure may occur in the flash 

15 memory because of its construction. Such a block 
failure may prevent the system from reading the con- 
trol information. If the control information is lost due 
to such a failure mode, not only does the system lose 
the data in that block, but it may also become impos- 

20 sible to control the integrity of the entire SSF. To date, 
no effective method has been proposed for data pro- 
tection management against a block failure. 

The control information includes data very critical 
for managing the system such as the erase count of 

25 a block which is never recovered once lost so that loss 
of it causes a severe problem in controlling the sys- 
tem. There has been no measures which can cope 
with a plurality of failure modes in protecting data 
which should be held at all times. 

30 In addition, when a physical sectorfor holding the 

control information is determined at a fixed location, 
if a fai lure should occur in that sector, the entire block 
or cluster controlled by the control information be- 
comes unusable. That is, there arises such ineff icien- 

35 cy that a failure in a critical sector causes an area sev- 
eral tens times greater to fail logically although there 
is no physical failure. To prevent this, there is a meth- 
od to provide a replacement sector for a critical sector. 
In this case, however, it is necessary to store in the 

40 system where the replacement sector is. In general, 
the information about the replacement sector is re- 
quired to be stored on a flash memory. In considera- 
tion of the characteristics of flash memories, this in- 
formation should be stored in a suitable sector be- 

45 longing to a cluster containing the sector to be altern- 
ated. Under such conditions, the information on the 
location of replacement sector in view of its nature 
may be stored in the flash memory as part of control 
information. However, such an approach causes a 

50 contradiction in that to locate the control information 
requires the information to refer to itself (for the loca- 
tion of the replacement sector). To date, no effective 
measures have been proposed for such a situation. 
In addition, it becomes necessary to update the 

55 control information (bad sector map) due to the occur- 
rence of a new bad sector or the like. However, be- 
cause, in general, the flash memory cannot be over- 
written, the update should wait until the control infor- 
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mation is written back after the completion of erasure 
of that cluster. The problem of how such update trans- 
action should be held until the completion of update 
processing is also yet unsolved. 

Viewed from one aspect the present invention 
provides a nonvolati le memory having flash erase ca- 
pability, comprising a plurality of sectors, each of the 
sectors storing attribute information for identification. 

Viewed from another aspect the present inven- 
tion provides a solid state file apparatus comprising: 
a controller; and a nonvolatile memory with flash 
erase capability comprising a plurality of clusters, 
each of said clusters comprising a plurality of sectors, 
said clusters being erasable cluster-by-cluster basis, 
each cluster being provided with a cluster information 
sector for storing management information for said 
cluster, said cluster information sector holding the at- 
tribute information for cluster information sector, and 
sectors for user data holding the attribute information 
for data sector. 

According to the present invention, endurance 
against failure such as power failure can be improved 
for a solid state file apparatus using a nonvolatile 
memory with flash erase capability. 

In order that the invention may be fully under- 
stood preferred embodiments thereof will now be de- 
scribed, by way of example only, with reference to the 
accompanying drawings in which: 

Figure 1 shows a block diagram illustrating an ex- 
ample of a computer system which uses a flash 
memory according to the present invention as a 
solid state file apparatus; 
Figure 2 shows a block diagram illustrating a 
schematic configuration of the solid state file ap- 
paratus; 

Figure 3 shows a format of a cluster information 
sector in the flash memory of the first embodi- 
ment; 

Figure 4 shows a format of a data sector in the 
flash memory; 

Figure 5 shows a format of a cluster information 
copy sector in the flash memory; 
Figure 6 shows a format of a bad sector informa- 
tion sector in the flash memory; 
Figure 7 shows a flowchart illustrating the oper- 
ation of the SSF when a bad sector is detected; 
Figure 8 shows a flowchart illustrating the oper- 
ation of the SSF when a sector is erased; 
Figure 9 shows a flowchart illustrating the oper- 
ation of the SSF when a sector is initialized; 
Figure 1 0 shows a flowchart i II ust rating an exam- 
ple of garbage collection; 
Figure 11 shows a flowchart illustrating another 
example of garbage collection; 
Figure 1 2 shows a flowchart illustrating the oper- 
ation of the SSF when an address translation ta- 
ble is reconstructed; 

Figure 1 3 shows a flowchart illustrating the oper- 



ation of the SSF when an address translation ta- 
ble is reconstructed; 

Figure 14 shows a flowchart illustrating reading 
of the top sector of a cluster of the SSF in the first 

5 embodiment and operations related thereto; 

Figure 15 shows a relationship between a block 
and pages in the second embodiment; 
Figure 16 shows a relationship between clusters, 
blocks, sectors and pages in the second em bod i- 

10 ment; 

Figure 17 shows a format of a cluster information 
sector in a flash memory in the second embodi- 
ment; 

Figure 18 shows a relationship between a re- 
15 placement-CIS pointer sector and a replacement- 

CIS; 

Figure 19 shows a format of a re placement- CIS 
pointer sector; 

Figure 20 shows a flowchart illustrating reading 
20 of the top sector of a cluster of the SSF in the sec- 

ond embodiment and operations related thereto; 
and 

Figure 21 shows a flowchart illustrating reading 
of the top sector of a cluster of the SSF in the sec- 

25 ond embodiment and operations related thereto. 

Figure 1 shows an example of a computer system 
in which a solid state file apparatus according to the 
present invention is incorporated. A CPU 10 commu- 
nicates, through a system bus 1 3, with a main storage 

30 15, a bus controller 16, and an optional math copro- 
cessor 14. Communications between the CPU 1 0 and 
the peripheral equipment are performed through a 
bus controller 16. To this end, the bus controller 16 is 
connected, through a family bus 18, to the peripheral 

35 equipment. A solid state file apparatus (SSF) 20 
made of the flash memory according to the present 
invention, a communication device 21, a floppy disk 
drive (FDD) 22, an optical file unit 23, and a display 
device 24 are connected to the family device 18 as 

40 the peripheral equipment. Of course, other peripheral 
equipment may also be connected. An example of 
such a computer system is the IBM PS/2 computer 
system. 

A direct memory access controller (DMAC) 12 is 
45 provided to enable memory access by all or some se- 
lected peripheral equipment. To this end, at least a 
portion of the family bus 18 is branched to the DMAC 
12. Each peripheral equipment which is allowed for 
DMA is provided with an arbitration circuit, though not 
50 shown in the drawing, and is assigned an arbitration 
level (priority). In association with the DMAC 12, a 
central arbitration control circuit 1 1 provided which ar- 
bitrates among a plurality of peripheral equipment si- 
multaneously requesting the DMA and informs the 
55 DMA 12 which peripheral equipment is granted the 
DMA. Details of the DMA control by the DMAC 12 and 
the central arbitration control circuit 11 are described 
in U. S. Patent 4,901,234. 
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The CPU 1 0 uses the SSF 20 as a hard disk drive. 
Therefore, when the SSF 20 is accessed, a relative 
block address (RBA) comprising a head number, a cy- 
linder number, and sector number, is sent to the SSF 
20. The SSF 20 performs dynamic sector allocation. 
Therefore, the relationship between the RBA provid- 
ed by the CPU 10 and an address (physical address) 
of a block of the SSF 20, which is actually accessed, 
is not fixed and varies each time writing is performed. 
Then, an address translation table is provided for in- 
dicating the relationship. That is, the RBA from the 
CPU 10 is a logical address. A corresponding physical 
address is written in the address translation table at 
an entry pointed by a logical address. 

Figure 2 shows a schematic configuration of the 
SSF 20. The SSF 20 comprises a controller 30 con- 
nected to the family bus 18, and an internal bus 31 
connected to a random access memory (RAM) 32, a 
bus control element 33, and a flash memory 34. Al- 
though not shown, the controller 30 includes a micro- 
processor and a ROM storing a program controlling it. 
The functions such as erasure, which are explained 
by referring flowcharts in Figure 7 and thereafter, are 
implemented by executing the program in the ROM 
with the microprocessor. 

The RAM 32 includes an area 35 for storing the 
address translation table, and a buffer area 36. In ad- 
dition, the RAM 32 includes a table 38 for storing the 
location of a cluster information copy sector (herein- 
after called the "CIS-copy location table"), and a table 
39 for storing the location of a bad information sector 
(hereinafter called the "bad sector information loca- 
tion table"), both of which are described later. The bus 
control element 33 has the well-known receiver/driver 
configuration for interconnecting the internal bus 31 
and a memory bus 37 connected to the flash memory 
34. 

Two embodiments with different configurations 
of sectors and clusters will be described in the follow- 
ing. Both of them are assumed that the sector size 
specified by the CPU 10 is 512 bytes, while the size 
of a physical sector, which is the minimum access unit 
of the CPU 10 to the SSF 20, is 512 bytes + a. In the 
first embodiment, sectors (physical sector) and clus- 
ters of the SSF 20 are managed as follows. 

1) Alogical set is created for which actual erasure 
is performed, and which is called a cluster. The cluster 
consists of one or more blocks, each of which is a 
physical erase unit. In this embodiment, eight sectors 
constitute one block, and eight blocks constitute one 
cluster. The relationship between the block and the 
cluster is established by making the upper address of 
the block an identifier for a cluster, or by creating a ta- 
ble. 

2) In this embodiment, each of the physical sec- 
tors has the following attribute, and is identified by an 
attribute flag. 

First, a sector positioned at the top physical ad- 



dress of each cluster is assigned to the cluster infor- 
mation sector (CIS) to store management information 
inherent to the cluster such as the cluster erase 
counts and the bad sector map in the cluster (see Fig- 

5 ure 3). In addition, a redundancy area (a bytes) in- 
cludes an area in which an attribute flag is written and 
to which a"cluster information" flag indicating it as the 
cluster information sector is set. A parity code or the 
like is added to each of these information units ena- 

10 bling it to detect occurrence of an error. 

The parity for each information is preferably to be 
a code allowing error correction. Here, it is sufficient 
to be a simple even-odd parity or CRC parity. ECC 
parity is calculated for entire management informa- 

15 tion including all of these parities (including the attri- 
bute flag), and the result is written in the redundancy 
area in the cluster information sector. 

Japanese Pat. Appln. No. 5-35228 discloses an 
invention wherein a sequence number is previously 

20 provided for each cluster in such a mannerthat no two 
clusters have the same sequence number, when 
erasing and then initializing a given cluster, a value 
larger than the current maximum sequence number is 
written into the given cluster as a new sequence num- 

25 ber. When clusters are managed by using such se- 
quence number, a sequence number is written in the 
cluster information sector as management informa- 
tion. The cluster management information does not 
occupy the entire area of 512 bytes. 

30 The top sector of a cluster is a vital sector in which 

the cluster management information is placed. How- 
ever, it may suffer from a failure such as word line fai I- 
ure as in the other sectors. If the top sector is bad, it 
is arranged so as to use as the cluster information 

35 sector a sector preceding other sectors with any other 
attributes. 

Because sectors other than the top sector of a 
cluster are areas in which user data is written, they 
are called user areas. Figure 4 shows a format of sec- 

40 tor holding user data for each cluster (hereinafter 
called the "data sector"). As shown in the figure, the 
data sector includes areas for holding an attribute 
flag and an error correction code (ECC) in addition to 
the data area of 512 bytes for holding user data. Set 

45 in the attribute flag is a "data" flag indicating it to be 
a data sector. In this embodiment, dynamic sector al- 
location is performed so that a reverse pointer point- 
ing an entry of the address translation table is written 
as part of the attribute flag. 

50 The data area may include sectors of a kind other 

than the data sector. Figure 5 shows a format of a sec- 
tor for holding a copy of cluster information sector 
(hereinafter called the "cluster information copy sec- 
tor" or "CIS copy sector"). This sector is one for hold- 

55 ing a copy of management information for a cluster 
other than the cluster to which it belongs. As shown 
in the figure, a cluster number and a copy of manage- 
ment information for the cluster with such number are 
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written in the 5 12- byte data area, and a "cluster infor- 
mation copy" attribute flag indicating a cluster infor- 
mation sectorand an ECC are written in the a-byte re- 
dundancy area. 

Figure 6 shows a format of a bad information sec- 
tor. This sector is a one for holding numbers of bad 
data sectors found in a cluster to which it belongs and 
other sectors. As shown in the figure, cluster num- 
bers, bad sector numbers in the cluster with that num- 
ber, and erase counts at the moment when a bad sec- 
tor is detected are written in the 51 2-byte data sector, 
and a "bad sector information" attribute flag and an 
ECC are written into the a-byte redundancy area. 

It should be noted that the formats shown in Fig- 
ures 3 - 6 are models. For example, the attribute flag 
may be positioned in an area which is first accessed 
in the entire 512 + a bytes (top of a word line). 

3) Now, the operation of the SSF will be ex- 
plained by referring to Figure 7 when a bad data sec- 
tor is found as a result of verification accompanying 
writing into a sector. 

If a verification error occurs even after writing in 
a data area several times, the controller temporarily 
save the cluster number, the erase count, and the 
sector numbers of the cluster to which that sector be- 
longs in a RAM (step 74). These information are then 
written in a sector to be written next in the cluster in 
which user data is being written to create a bad infor- 
mation sector with an attribute flag for "bad sector in- 
formation" (step 75). Thereafter, the location of the 
bad information sector (cluster number and sector 
number) is registered in a bad sector information lo- 
cation table (step 76). The bad sector information lo- 
cation table records the relationship between the 
cluster number in the bad information sector and the 
location of that sector. For example, registered in an 
entry determined by the cluster number is the location 
of the bad information sector including that number. 

As described, a bad information sector is created 
in the flash memory when a bad sector is found so 
that the bad sector information can be maintained 
even if power failure should occur in a period before 
the related bad sector map is updated. 

4) The operation of the SSF will be explained by 
referring to Figures 8-11 in erasing and initializing a 
cluster (an erase program and an initialize program 
executed by the controller). 

Figure 8 shows a flowchart for erasure of a clus- 
ter. When a cluster Cn satisfies a condition such that 
the number of its valid sectors is below a predeter- 
mined number, the controller determines that cluster 
to be erased (step 80). Then, it performs garbage col- 
lection for saving valid data in that cluster in another 
cluster, which is described later (step 81). 

After the garbage collection, the controller reads 
the CIS of the cluster Cn and saves it in the RAM. 
Then, the cluster number of Cn and the management 
information just read are written into a sector to be 



written next in the cluster in which the user data is be- 
ing written, and a "cluster information copy" flag and 
a calculated ECC are written in it so as to create a 
cluster information copy sector (step 83). After the lo- 

5 cation of the created CIS copy sector is registered in 
the CIS-copy location table, the controller erases the 
cluster Cn (steps 84 and 85). The CIS-copy location 
table records the relationship between the cluster 
numbers included in the copy sectorand the location 

10 of that sector. For example, registered in an entry de- 
termined by a cluster number is the location of a CIS 
copy sector including that number. 

Thus, the CIS copy sector is created in the flash 
memory before erasing a cluster so that the cluster 

15 management information is not lost even if power fai I- 
ure should occur during erasure. 

Figure 9 shows a flowchart for initialization of a 
cluster. The initialization herein means that a cluster 
information sector is created in an erased cluster so 

20 that it is put into a state allowing the writing of user 
data. When a condition is reached such that clusters 
consisting of blank sectors only are exhausted, the 
controller selects a cluster Cm to be initialized from 
one or more erased clusters by taking the erase count 

25 or the like into consideration (step 90). Then, it reads 
the CIS copy sector on the cluster Cm indicated in the 
CIS-copy location table to reconstruct the manage- 
ment information of the cluster Cm. The erase count 
is incremented at this time (step 91). Then, it reads 

30 the bad information sectors in the cluster Cm indicat- 
ed in the bad sector information location table, and 
updates the bad sector map based on the information 
on the bad information sectors (step 92). Thereafter, 
a cluster information sector is created in the top sector 

35 of the cluster Cm. If writing in the sector should fail, 
or if the management information in the CIS copy sec- 
tor (for example, the top bit of the bad sector map) in- 
dicates that the top sector is bad, the cluster informa- 
tion sector is created at the second location or later 

40 which is not bad (step 93). The location information on 
the CIS copy sector reflected in the cluster informa- 
tion sector is cleared from the CIS-copy location ta- 
ble, and the location information on the bad sector in- 
formation location table is cleared from the bad sector 

45 information location table (step 94). 

Now, the garbage collection is described in detail 
for two cases. Figure 1 0 shows a flowchart for a case 
where a data area is read from top to end. If it is de- 
termined to be a CIS copy sector from the attribute 

50 flag of the read sector, the controller determines 
whether or not it holds valid information, and there- 
fore, has to be copied to another sector (step 1 02). 
More specifically, the erase count Ex of a cluster Cx 
held by the CIS copy sector is compared with an erase 

55 count Ea actually written in the CIS of cluster Cx. If 
Ex equals Ea, the CIS copy sector is considered to be 
valid data. Also, if the cluster Cx is in an erased state, 
it is considered to be valid. Otherwise, it is handled as 
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invalid data. Thus, it prevents the CIS copy sector 
from being erased as invalid data. If the cluster is in 
an erased state, judgment is made in step 142 in Fig- 
ure 14, which will be described later. 

Also, if the read sector is found to be a bad infor- 
mation sector, a similar judgment is made (step 104). 
More specifically, the erase count held by the bad in- 
formation sector is compared with that written in the 
actual CIS. If both are equal, the bad sector informa- 
tion is considered to be valid. Otherwise, it is deter- 
mined that the bad sector information has been re- 
flected in the CIS, and is treated as invalid data. Thus, 
it prevents the bad information sector from being 
erased prior to update of the bad sector map. 

Also, if the read sector is a data sector, it is de- 
termined whether or not it should be copied (step 
105). More specifically, the address translation table 
is referenced by the reverse pointer to find a physical 
address written in it, which is then compared with its 
physical address. If both match, then it is valid data. 
Thus, the sector is copied in a location where the user 
data should be written in the cluster in which the user 
data is being written (step 106). Then, if the read sec- 
tor is a valid CIS copy sector, the CIS-copy location 
table is updated, and if it is a valid bad information 
sector, the bad sector information location table is up- 
dated (step 1 07). 

5) Figure 11 shows a flowchart for garbage col- 
lection which, when the validity of each data sector 
has been previously recorded, is performed by utiliz- 
ing such record, the CIS-copy location table and the 
bad sector information location table. The validity is 
determined in a manner similar to step 102 in Figure 
1 0 if the CIS copy sector is in a cluster to be erased, 
and in a manner similar to step 104 if there is a bad 
information sector (step 112 and 117). 

The operation of the SSF will be explained by re- 
ferring to Figures 12 and 13 in reconstructing the ad- 
dress translation table (an address translation table 
reconstruction program executed by the controller). 
The address translation table is essential in executing 
the dynamic sector allocation, but, because it is cre- 
ated on the RAM, is lost when the power is turned off. 
Therefore, when starting the system, the address 
translation table is reconstructed by reading all sec- 
tors in all clusters. 

After successful reading of the CIS at the top of 
a given cluster, the controller sequentially reads the 
sectors in a data area from top to end (steps, 121, 
122, 132 and 135). For a sector failed in reading, its 
location is temporarily saved in the RAM (step 131). 
For a sector successful in reading, its attribute flag is 
checked. If it is a CIS copy sector or a bad information 
sector, its validity is determined as in steps 102 and 
1 04 (steps 125 and 128). If the read sector is a valid 
CIS copy sector, the CIS-copy location table is updat- 
ed, and, if it is a valid bad information sector, the bad 
sector information location table is updated (steps 



1 26 and 129). If it is a data sector, its physical address 
is registered in an entry of the address translation ta- 
ble pointed by the reverse pointer (step 130). 

After completion of reading of the data area, the 

5 location of the read failed sector saved in step 131 is 
compared with the location registered in the bad sec- 
tor map in the CIS (step 133). If the location of the 
read failed sector is not yet registered, an error mes- 
sage is displayed on, for example, the display device 

10 24 (Figure 1) (step 134). 

6) As described earlier, the SSF reads the cluster 
information sector when erasing a cluster, or when re- 
constructing the address translation table. However, 
if erasure or initialization has ended in failure due to 

15 system failure or the like, the content of cluster man- 
agement information is broken, and an ECC uncor- 
rectable error is generated. That is, reading of the top 
sector of the cluster has ended in failure. Also, in this 
embodiment, when the top sector of the cluster is bad, 

20 the cluster information sector is the next sector, orthe 
sector at the top of data area. In this case also, the 
reading of the top sector has ended in failure. 

Figure 14 shows a flowchart of an operation for 
acquiring the cluster management information when 

25 reading the top sector, or when failing such reading in 
erasing a cluster or in reconstructing the address 
translation table. If no uncorrectable error is detected 
when reading the top sector, step 146 checks the at- 
tribute flag. If it is confirmed to be "cluster informa- 

30 tion," the management information is saved in the 
RAM by type (step 147). 

Situations where an error should be detected in 
step 141 includes such cases where the cluster has 
been erased. Then, step 142 determined whether or 

35 not the cluster has been erased. More specifically, 
the bit pattern of the top sector is compared with a bit 
pattern specific for an erased one. If both match, it 
means erased, and the process terminates imme- 
diately. 

40 In this embodiment, if the top sector is bad, a 

cluster information sector proceeds all other sectors 
with any attribute in the data area. Then, even when 
step 143 determines an error to be uncorrectable, the 
controller repeats reading of sectors and detection of 

45 an error until it finds a sector not causing an uncor- 
rectable error (steps 144, 145, and 143). 

If a cluster properly read as the result of decision 
in step 146 is not a cluster information sector, it means 
that the cluster information sector is not at a location 

50 where it should be originally placed. Such a situation 
is generated when system failure such as power off 
occurs during erasing a block including the cluster in- 
formation sector or during initializing a cluster, or 
when the cluster information sector becomes unread- 

55 able. Then, in step 148, a cluster information copy 
sector saving the cluster management information is 
searched by scanning all sectors in all clusters. Once 
it is found, erasure is performed again, and initializa- 
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tion is performed by fetching the management infor- 
mation from the cluster information copy sector, copy- 
ing it to the top sector of the cluster, and creating a 
cluster information sector. If writing in the top sector 
should end in failure, the next sector is made the clus- 
ter information sector (step 150). If there is no CIS 
copy sector, it means that a fatal error is caused. 
Then, a message indicating the fact is informed to the 
user, and an instruction from the user is waited for 
(step 151). 

Now, the management of sectors and clusters in 
the second embodiment will be explained. 

7) As shown in Figure 15, a block, a physical 
erase unit, is divided into N pages. The size of one 
page is 256 + p bytes (256 = one half of sector size, 
and p being a redundancy area of several bytes used 
by the system). 

How to constitute a page does not generally de- 
pend on the physical requirements of a chip being 
used. For example, in a case of a chip in which access 
is made on a byte-by-byte basis, it is sufficient to sim- 
ply handle 256 + p bytes as a logical block. It may also 
be possible to use a dedicated chip the physical page 
length (word line length) of which is 256 + p bytes. Fig- 
ures 15 and 16 show a case where the latter chip is 
used. 

8) An even number of blocks constitutes a set to 
form a cluster which is a logical erase unit. The con- 
troller performs erasure on a cluster- by-cluster basis. 
As shown in Figure 16, these blocks are divided into 
groups of each half, each of which is allocated to a dif- 
ferent chip. 

Allocation of blocks forming a cluster to a chip is 
generally performed in any desired method. Herein, 
block allocation as shown in Figure 16 is employed to 
simultaneously activate two chips for the purpose of 
improvement of data transfer rate. That is, one block 
is formed by four blocks every two of which are allo- 
cated to different chips. This allows it to double the 
bus width between the controller and the flash mem- 
ory. If double bus width is further required, it is suffi- 
cient to divide the blocks forming a cluster into groups 
of 1/4, and allocate each of them to four different 
chips. In this case, the length of one page is made 128 
+ y. 

9) One physical sector is always assigned to a 
plurality of blocks (in this case, two). Also, an ECC 
parity is appended to an entire sector. 

The length of a physical sector is 512 + a bytes, 
and two pages are necessary to hold it (hereinafter, 
two pages for holding one physical sector being called 
a "page pair"). In this embodiment, it is arranged so 
that each page is in a different chip and therefore in 
a different block by allocating each pair in Pa (x) and 
Pb (x) as shown in Figure 16. 

10) A cluster information sector is formed in the 
top sector in each cluster (Pa (0) and Pb (0) in Figure 
16) in which, as in the first embodiment, management 



information inherent to each cluster such as the clus- 
ter erase count and the bad sector map in the cluster 
is stored by appending parity codes. Figure 17 shows 
the format of the cluster information sector of this em- 
5 bodiment. It differs from that of the first embodiment 
in that the cluster management information is written 
in each page of the page pair in duplicate. 

An ECC parity is calculated for the entire dupli- 
cated management information in the page pair (in- 
fo eluding the "cluster information" attribute flag), and 
written in the redundancy area in the page pair (a = 
2p bytes). One half of the bits in the calculated ECC 
parity are stored in Pa (0), and the other in Pb (0). 
Therefore, the ECC portions in Pa (0) and Pb (0) are 
15 different from each other. Except for the ECC portion, 
both pages hold exactly same content. 

Because, as described, the cluster management 
information is held in two pages in duplicate, it is nev- 
er lost all at once due to a word line failure. In addition, 
20 because these two pages are allocated to different 
blocks, the cluster management information is never 
lost all at once due to a block failure. In Figure 16, 
page pairs for sectors other than the cluster informa- 
tion sectors are allocated to two blocks. Generally, 
25 endurance against block failure can be sufficiently 
enhanced even if the page pair constituting the clus- 
ter information sector is allocated in different blocks, 
while page pairs for other sectors are allocated in a 
same block. 

30 While, in the first embodiment, a sector other 

than the cluster information sector is never positioned 
at the top of the cluster, a replacement-CIS pointer 
sector may be positioned in it in this embodiment. As 
shown in Figure 18, the replacement-CIS pointer sec- 

35 tor is such a one, if one of pages in the top sector of 
the cluster is bad, to hold the address of replacement- 
CIS in the other page. Figure 19 shows a format for 
it. The address (pointer) of a replacement sector for 
storing the cluster management information is written 

40 in the top of one page, and an attribute indicating it 
as the replacement sector pointer and an ECC are 
written in the redundancy area of p bytes. 

Usually, the second sector in a cluster is selected 
as the replacement sector. However, if such sector 

45 has a bad sector map set with a "bad" flag, selection 
proceeds one after another for the replacement-CIS 
sector. A sector selected as the replacement sector 
has usually the same format as the ordinary cluster 
information sector. It has the same formats for the 

50 data sector, the cluster information copy sector, and 
the bad sector information sector as those shown in 
Figures 4 through 6. 

11) In this embodiment, the operations of the SSF 
are same as those in the first embodiment when a bad 

55 data sector is found, or when erasure, initialization, or 
creation of the address translation table is performed. 
However, because the cluster information is duplicat- 
ed and the replacement sector pointer is provided , the 
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operation differs from that of the first embodiment 
when the top sector of the cluster is read and when 
such reading is failed. Figures 20 and 21 show the 
flowchart of the operation in this embodiment. 

When no uncorrectable error is detected by read- 
ing the top sector, the process proceeds to step 216 
where the management information is divided and 
stored in the RAM by type. 

If an uncorrectable error is detected, the cluster 
information sector is separately read by page. First, 
the page Pa (0) is read and checked for the integrity 
of data by the parity codes for Pa (0) appended to va- 
rious management information (step 204). If they are 
correct data, the process proceeds to step 208 where 
the attribute flag of Pa (0) is checked. 

If the data read from Pa (0) is incorrect, the page 
Pb (0) is read and checked by the parity codes (step 
206). If the data is correct, the process proceeds to 
step 209 where the attribute flag of Pb (0) is checked. 

If the contents of both page for the top sector are 
incorrect, a CIS copy sector is searched. If it is found, 
the process proceeds to step 212 where the CIS is re- 
covered as in step 149 in Figure 14. If not, it proceeds 
to step 21 3 where processing such as error display is 
performed as in step 150 in Figure 15. 

If the checking of attributes in the page Pa (0) or 
Pb (0) which is not bad in step 214 reveals that the 
page is one of the pages constituting the CIS, it 
means that neither a replacement-CIS sector or a re- 
placement-CIS sector pointer has yet been created. 
Therefore, to create the replacement-CIS and the re- 
placement-CIS pointer sector in subsequently initial- 
izing a cluster, which of pages for the number and the 
top sector of the cluster is bad is saved in the RAM 
(step 215). Then, in step 216, the management infor- 
mation contained in that page is divided and stored in 
the RAM by type. 

It the attribute of Pa (0) or Pb (0) is a "replace- 
ment-CIS pointer," the process proceeds to step 217 
where the replacement-CIS being pointed is read and 
the management information is fetched. 

Although, in practice, there is a step correspond- 
ing to step 142 in Figure 14 between steps 201 and 
202, for the convenience of description, it is omitted 
in Figure 20. 

Although two specific embodiments are descri- 
bed in the above, the scope of this invention is not lim- 
ited to them. For example, in an SSF in which a se- 
quence number is written in a cluster and rewritten at 
every erasure or initialization as disclosed in Japa- 
nese Pat. Appln. No. 5-35228, it may be possible to 
compare the sequence number instead of the erase 
count in steps 112 and 117 in Figure 11 or in steps 125 
and 128 in Figure 12. 

A method for reliably attaining, saving, and updat- 
ing control information which is essential to assuring 
the reliability of a solid state file apparatus (SSF) us- 
ing nonvolatile memories with flash erase capability 



has been described. A solid state file apparatus and 
means for recovering control information for erase 
counts of clusters or the like when it is lost by a sys- 
tem failure such as an accidental power failure has 

5 also been described. When a bad sector is detected 
during operation of the SSF, it is correctly reflected in 
the control information holding area. Means for hold- 
ing and recovering the control information which can 
cope with a situation when the control information 

10 holding area becomes unusable due to a sector fail- 
ure such as a word line failure was also described as 
was means for holding and recovering the control in- 
formation which can cope with a block failure. 

Thus a nonvolatile memory with flash erase ca- 

15 pability described, comprises a plurality of sectors, 
each of said sectors holding the attribute information 
for identification. The nonvolatile memory with flash 
erase capability can be erased for each cluster as a 
unit, which comprises a plurality of sectors, each clus- 

20 ter being provided with a cluster information sector for 
storing its own control information, the cluster infor- 
mation sector for each cluster holding attribute infor- 
mation for identification, a sector to be written with 
user data holding attribute information for data sector. 

25 The cluster information sector is in principle placed at 
a predetermined location in a cluster to which it be- 
longs. The data sector is placed in a data area in the 
cluster which is an area other than that predetermined 
location. A data area of a given cluster may include a 

30 copy of management information on other clusters. 
Written in this cluster are the identifier for the other 
clusters and attribute information indicating them as 
copies of the cluster information sector. The manage- 
ment information may include the erase counts of the 

35 cluster and a bad sector map. The data area of a given 
cluster may include a sector for storing a location of 
bad sector which is in that cluster or another cluster, 
and is not yet reflected in the bad sector map of a re- 
lated cluster information sector. This sector is written 

40 with an identifier for the cluster including the bad sec- 
tor and attribute information indicating it as a bad in- 
formation sector. 

The solid state file apparatus described, com- 
prises a controller, and a nonvolatile memory with a 

45 flash erase capability connected to it, in each sector 
of which attribute information is set. The controller 
creates a cluster information copy sector in a data 
area upon cluster erasure, and reconstructs cluster 
management information from the cluster information 

50 copy sector upon cluster initialization to create a clus- 
ter information sector. 



Claims 

55 

1. A nonvolatile memory having flash erase capa- 
bility, comprising a plurality of sectors, each of 
the sectors storing attribute information for iden- 
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tification. 

2. A nonvolatile memory as claimed in Claim 1 fur- 
ther comprising a plurality of clusters, each clus- 
ter comprising a plurality of said sectors, and the 5 
clusters are erasable on a cluster-by-cluster ba- 
sis, and wherein each cluster is provided with a 
cluster information sector for storing manage- 
ment information for said cluster, said cluster in- 
formation sector holding attribute information for 10 
the cluster information sector; and sectors for 
user data holding the attribute information for the 
data sector. 

3. A nonvolatile memory as claimed in Claim 2, 15 
wherein said cluster information sectors are 
placed at a predetermined location in the clus- 
ters, said data sectors are placed in a data area 

at a location other than said predetermined loca- 
tion in the cluster. 20 

4. A nonvolatile memory as claimed in Claim 3 fur- 
ther comprising a sector in a data area in a given 
cluster for storing a copy of management informa- 
tion for another cluster, said sector holding the 25 
identifier of said another cluster and the attribute 
information for the cluster information copy sec- 
tor. 

5. A nonvolatile memory as claimed in any of 30 
Claims 2 to 4 wherein said management informa- 
tion contains cluster erase counts and a bad sec- 
tor map. 

6. A nonvolatile memory as claimed in Claim 5 fur- 35 
ther comprising a sector in a data area in a given 
cluster for storing a location of a bad sector which 

is in said cluster or another cluster and not yet re- 
flected in the bad sector map in the related cluster 
information sector, said sector holding the identi- 40 
f ier of the cluster containing said bad sector and 
the attribute information for the bad sector infor- 
mation sector. 

7. A nonvolatile memory as claimed in any of 45 
Claims 2 to 6 wherein each cluster comprises a 
plurality of blocks, each of said blocks being a 
physical erase unit and comprising a plurality of 
pages; 

top pages of one half of the blocks consti- 50 
tuting a given cluster being allocated to the first 
half of the cluster information sector of said given 
cluster, top pages of the remaining blocks being 
allocated to the second half of said cluster infor- 
mation sector; and 55 

the management information for said giv- 
en cluster being written in said first and second 
halves of said cluster information sector in dupli- 



cate. 

8. A nonvolatile memory as claimed in Claim 7, 
wherein the first and second halves of said clus- 
ter information sector are assigned to different 
memory chips. 

9. A nonvolatile memory as claimed in Claim 8, 
wherein, when one half of said cluster information 
sector is bad, a replacement-cluster-information 
sector is placed in the data area of said given 
cluster, said sector holding the attribute informa- 
tion for cluster information sector; the other half 
of said cluster information sector holding a poin- 
ter pointing said replacement-cluster-information 
sector. 

10. A solid state file apparatus comprising: 

a controller; and 

a nonvolatile memory with flash erase ca- 
pability comprising a plurality of clusters, each of 
said clusters comprising a plurality of sectors, 
said clusters being erasable cluster-by-cluster 
basis, each cluster being provided with a cluster 
information sector for storing management infor- 
mation for said cluster, said cluster information 
sector holding the attribute information for cluster 
information sector,and sectors for user data hold- 
ing the attribute information for data sector. 

11. A solid state file apparatus as claimed in Claim 
10, wherein said cluster information sectors are 
placed at a predetermined locations in the clus- 
ters, said data sectors being placed at data areas 
at locations other than said predetermined loca- 
tions in the clusters. 

12. A solid state file apparatus as claimed in Claim 
10 or Claim 11, wherein said management infor- 
mation includes erase count of the cluster. 

13. A solid state file apparatus as claimed in any of 
Claims 10 to 12, wherein: 

prior to erasure of a given cluster, said con- 
troller reads the management information in its 
cluster information sector; and 

writes an identifier of said given cluster 
and said management information in a sector in 
a data area of a cluster other than said given clus- 
ter, and sets in said written cluster the attribute 
information for cluster information copy selector. 

14. A solid state file apparatus as claimed in Claim 
13, wherein: 

said management information includes 
cluster erase count; 

said controller determines the validity of 
the cluster information sector in a given cluster to 
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21. A solid state file apparatus as claimed in any of 
Claims 10 to 20, further comprising: 

a random access memory connected to 
said controller; 

said random access memory being provid- 
ed with an address translation table, said table 
translating a logical address contained in a com- 
mand issued by a processor connected to said 
controller into a physical address pointing a spe- 
cific sector; 

when reconstructing said address transla- 
tion table by reading all sectors in said memory 
upon starting up, said controller recording the as- 
sociativity between the cluster identifier included 
in the detected cluster information copy sector 
and the location of said sector in a table other 
than said address translation table on said ran- 
dom access memory. 
Claims 13 to 15, wherein, when failing to read the 
cluster information sector for a given cluster, said 20 
controller searches the cluster information copy 
sector including the identifier of said given clus- 
ter. 

17. A solid state file apparatus as claimed in any of 25 
Claims 10 to 16, wherein said management infor- 
mation includes a bad sector map. 

18. A solid state file apparatus as claimed in Claim 

1 7, wherein, when detecting a bad sector in a giv- 30 
en sector, said controller writes the identifier of 
said cluster, the identifier of said bad sector, and 

the erase count of said cluster in a sector of a 
cluster to which user data is being written, and 
sets in said written cluster the attribute informa- 35 
tion for the bad sector information cluster. 

19. A solid state file apparatus as claimed in Claim 

18, wherein: 

said management information includes 40 
cluster erase count; 

said controller determines the validity of 
the bad sector information sector in a given clus- 
ter to be erased by comparing the erase count 
held in said bad sector information sector with 45 
that held in the cluster information sector for the 
cluster pointed by said sector; and 

if it is valid, copies said bad sector informa- 
tion sector to a data area of another cluster prior 
to erasure of said given cluster. 50 

20. A solid state file apparatus as claimed in Claim 
18, wherein, when initializing a given cluster after 
erasure, said controller references the bad sector 
information sector, which is created prior to era- 55 
sure and includes the identifier of said given clus- 
ter, and updates the bad sector map of said given 
cluster. 



be erased by comparing the erase count held in 
said cluster information copy sector with that held 
in the cluster information sector for the cluster 
pointed by said sector; and 

if it is valid, copies said cluster information 5 
copy sector to a data area of another cluster prior 
to erasure of said given cluster. 

15. A solid state file apparatus as claimed in Claim 

13 or Claim 14, wherein, when initializing a given 10 
cluster after erasure, said controller reconstructs 
the management information from the cluster in- 
formation copy sector, which is created prior to 
erasure and includes the identifier of said given 
cluster, and creates the cluster information sector 15 
in said given cluster. 

16. A solid state file apparatus as claimed in any of 
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